$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa File: 514e116e-7b0c-3978-b9a2-1653b3a7d019.roa (raw, json) Hash identifier: otqBbcW67W3tZLqsizQQCjaSMnMihyPOM3pPDXj1TBE= Subject key identifier: E7:29:59:93:80:E1:A3:47:7B:70:ED:56:C3:89:59:FC:9A:82:CC:96 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F18978FE6B240366007F40E00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 2615 IP address blocks: 147.1.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:8f:e6:b2:40:36:60:07:f4:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=bbd5f132-aa1c-4e59-a8ab-91606a00f14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:54:9b:6c:ee:7c:47:a5:78:1d:75:72:92: 21:e0:8e:ea:8b:cc:84:28:42:9d:ff:8d:84:3c:42: 86:98:88:a9:66:5c:00:08:1c:72:7e:f1:bc:df:eb: 5e:21:19:93:b7:fe:61:74:27:bf:99:28:29:9b:46: 30:ca:cd:3d:4f:65:b9:38:c5:52:c0:67:93:94:8e: d1:3b:3f:57:b8:21:1a:76:74:23:b2:11:33:75:bc: b2:2d:48:26:4f:39:9f:06:ce:fd:78:a5:0d:97:31: c1:7d:a5:dc:fa:d4:ec:31:b3:5b:a1:57:86:19:b5: ca:67:23:63:91:41:95:f3:8c:2c:7c:ca:bb:3f:21: c1:2a:f3:52:6c:4a:44:03:c8:62:ff:67:49:f4:b9: ad:3b:eb:ad:bb:25:27:d7:ad:f2:ad:ac:24:7f:6c: 6b:b5:73:b5:b1:13:85:a3:39:2e:98:40:cf:5c:4f: f3:38:f8:a9:be:89:19:d1:45:8c:37:ec:f9:ac:f4: 8f:dd:42:35:56:a3:16:9c:a0:de:84:11:88:0f:9f: b6:1a:12:d5:23:b2:2b:f6:e4:0d:f6:88:f7:c3:4a: 90:32:a0:07:a0:c2:4b:57:17:6a:13:f1:d9:4d:5a: 43:f9:36:d7:34:d3:43:ec:06:9c:2e:0c:0d:d3:1a: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:29:59:93:80:E1:A3:47:7B:70:ED:56:C3:89:59:FC:9A:82:CC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5b:0e:13:09:21:a0:dd:7b:31:aa:3b:fb:22:b5:8b:54:4f: 0f:37:cb:f2:f5:99:93:59:a8:66:17:48:6b:bf:60:df:0a:a5: 42:0d:3e:25:99:2d:b2:22:29:b3:95:5e:ef:a6:16:7c:21:73: 45:05:7c:78:b6:28:c3:ca:3d:e5:ae:9f:54:a7:46:de:37:29: 3d:2c:07:34:e2:db:a3:8c:c6:a8:8d:0e:7f:fa:05:7b:3c:4e: da:fc:8c:90:64:d9:ff:a8:6a:5f:d7:b2:95:1e:71:b1:70:fb: 2d:d6:25:37:53:9b:32:c0:31:da:45:92:b5:5e:7a:d1:57:3a: 65:f8:84:c8:42:cb:9f:c5:a4:ee:b3:77:00:d6:a7:35:ba:81: ef:77:0d:a6:5e:5e:af:53:20:5d:5e:f2:08:f1:35:dd:46:fb: 24:75:e3:05:d3:00:ea:c9:2d:20:e3:99:5e:d6:64:25:4a:41: 4c:1c:e3:0b:12:42:be:37:db:4e:14:7c:97:50:19:6d:6c:09: 31:22:fc:e2:12:81:c8:6c:2c:3c:ec:70:6e:37:78:b1:e7:55: 57:9c:15:78:85:b6:cb:2d:6c:53:19:8f:6f:53:be:69:64:4b: 7e:60:d0:95:9e:b6:27:3e:72:23:f4:34:c8:0b:61:1f:ba:39: c3:9f:3e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl4/mskA2YAf0DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YmJkNWYxMzItYWExYy00ZTU5LWE4YWItOTE2MDZhMDBmMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFpUm2zufEeleB11cpIh4I7qi8yEKEKd/42E PEKGmIipZlwACBxyfvG83+teIRmTt/5hdCe/mSgpm0Ywys09T2W5OMVSwGeTlI7R Oz9XuCEadnQjshEzdbyyLUgmTzmfBs79eKUNlzHBfaXc+tTsMbNboVeGGbXKZyNj kUGV84wsfMq7PyHBKvNSbEpEA8hi/2dJ9LmtO+utuyUn163yrawkf2xrtXO1sROF ozkumEDPXE/zOPipvokZ0UWMN+z5rPSP3UI1VqMWnKDehBGID5+2GhLVI7Ir9uQN 9oj3w0qQMqAHoMJLVxdqE/HZTVpD+TbXNNND7AacLgwN0xoyHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcpWZOA4aNHe3DtVsOJWfyagsyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTE0ZTExNmUtN2IwYy0z OTc4LWI5YTItMTY1M2IzYTdkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJbDhMJIaDdezGqO/sitYtUTw83y/L1mZNZqGYXSGu/YN8KpUINPiWZ LbIiKbOVXu+mFnwhc0UFfHi2KMPKPeWun1SnRt43KT0sBzTi26OMxqiNDn/6BXs8 Ttr8jJBk2f+oal/XspUecbFw+y3WJTdTmzLAMdpFkrVeetFXOmX4hMhCy5/FpO6z dwDWpzW6ge93DaZeXq9TIF1e8gjxNd1G+yR14wXTAOrJLSDjmV7WZCVKQUwc4wsS Qr43204UfJdQGW1sCTEi/OISgchsLDzscG43eLHnVVecFXiFtsstbFMZj29Tvmlk S35g0JWetic+ciP0NMgLYR+6OcOfPrc= -----END CERTIFICATE-----Generated at Tue Sep 22 23:49:43 2026 by rpki-client